Privacy Policy

Account information

• Registration data: your name, email address, organization name and password (stored in hashed form).
• Profile and settings: preferences, notification settings and any information you choose to add to your profile.

Billing & payment information

• Transaction records: top-ups, charges, invoices and payment status.
• Payment details are processed by third-party payment providers (for example Stripe); we do not store your full payment card number.

Usage & request metadata

• Request metadata: request ID, API key identifier (hashed), model requested, token counts (input/output/cached/reasoning), timestamps, latency, error codes and amounts charged.
• We do not, by default, persist the body of your prompts or model responses, and we do not log Authorization headers.

Technical & device data

• IP address, browser/device type, operating system, and related technical data collected automatically for security, rate limiting and fraud prevention.

Communications

• Information you provide when you contact support, including emails and support tickets.

• Directly from you: when you register, top up, create API keys, configure settings or contact support.
• Automatically: through cookies and similar technologies, and from server logs as you use the Service.
• From third parties: payment processors and other service providers that help us operate the Service.

• To provide, operate, maintain and improve the Service, including routing requests, metering usage and billing.
• To process payments and prevent fraud.
• To provide customer support and respond to your requests.
• To secure the Service, detect and prevent abuse, and enforce our Terms.
• To analyze usage on an aggregated or de-identified basis.
• To comply with legal obligations and, where you have consented, to send you service-related or marketing communications.

Where the GDPR or UK GDPR applies, we process personal data on the following legal bases:

• Contract: to provide the Service and perform our agreement with you.
• Legitimate interests: to secure the Service, prevent fraud and improve our offering, where such interests are not overridden by your rights.
• Consent: where you have given consent, for example for marketing communications (which you may withdraw at any time).
• Legal obligation: to comply with applicable law, such as tax or record-keeping requirements.

Upstream model providers

When you make an API call, your request content (including your prompt) is transmitted to the third-party Provider that operates the model you selected, so that it can generate a response. The relevant Provider acts as a separate controller (or processor) for that content.

Service providers

• Payment processors (for example Stripe) to process payments.
• Email and communications providers to send transactional emails.
• Hosting and infrastructure providers to operate the Service.
• Analytics providers, where used, on an aggregated or de-identified basis.

Legal & compliance

We may disclose information where required by law, regulation, legal process or a valid government request, or to protect the rights, property or safety of us, our users or others.

We and our service providers may process data in jurisdictions outside your own, including jurisdictions that may provide a different level of data protection. Where required, we use appropriate safeguards such as Standard Contractual Clauses, and we require our processors to protect personal data in accordance with applicable law.

• Account data: retained for as long as your account is active, and thereafter for as long as reasonably necessary for legal, accounting, security and legitimate business purposes.
• Usage metadata: retained for billing, security and support purposes for as long as reasonably necessary, after which it may be deleted or de-identified.
• Support communications: retained for as long as reasonably necessary to resolve the request and maintain records.

Depending on your jurisdiction, you may have the right to:

• Access: request a copy of the personal data we hold about you.
• Correction: request that inaccurate or incomplete data be corrected.
• Deletion: request that your personal data be deleted, subject to legal retention obligations and our legitimate business needs.
• Restriction: request that processing be restricted in certain circumstances.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interests.
• Withdraw consent: withdraw consent at any time where processing is based on consent.
• Opt-out: (California residents) request information about, and opt out of, any “sale” or “sharing” of personal data, and not be discriminated against for exercising your rights.
• Complaint: lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at support@admesh.ai. We will respond within the timeframe required by applicable law and may ask you to verify your identity. Where permitted by law, we may charge a reasonable fee or decline requests that are manifestly unfounded or excessive.

We use cookies and similar technologies (including local storage) for essential functionality, security, preferences and limited analytics. For details, please see our Cookie Policy.

We implement reasonable technical and organizational measures to protect personal data, including encryption in transit, hashed storage of credentials, access controls and monitoring. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

The Service is intended for businesses and adult developers and is not directed to children under 18 (or a lower age threshold set by applicable law, such as 13 or 16). We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will take steps to delete it where required.

We may update this Privacy Policy at any time, in our sole discretion, by posting the updated policy on this page and updating the “Last updated” date. Your continued use of the Service after the effective date constitutes acceptance of the revised policy. For material changes, we will provide additional notice where required by law.